Baptiste Robert Profile picture
Aug 25 20 tweets 8 min read Read on X
The woman who accompanied Pavel Durov on his journey that led to his arrest is Juli Vavilova

It's #OSINT time!
Image
On August 21, Pavel Durov posted on his VK account:

"Telegram delegation visit to Azerbaijan

In Azerbaijan, Pavel Durov honed his target shooting skills and prepared for Formula 1."

The post was accompanied with 2 videos

Image

On his Instagram, Julia published a video from the same car
She also published a video from the exact same shooting range
Now the funny part: she was happy to share his Azerbaijan trip to his Instagram community so she published a lot of videos.

They stayed at the Four Seasons in Baku

Image
They were together in Uzbekistan too
Image
Same in Kazakhstan


Image
Image
Image
Image
On Telegram, she published (twice) the helicopter they used during their Baku trip Image
The helicopter home base is UBTT, Zabrat close to the Baku airport

aviapages.com/aircraft/4k-88…

Image
Image
Might be her trip to Ganja on August 18 Image
Conclusion: They made a lot of efforts to not appears together but still #OPSEC is hard!
In Uzbekistan, Gusein Gasanov, a russian blogger, was with Pavel and Julia

On June 25, in Uzbekistan Pavel Durov has been spotted with Gusein Gasanov (black and red jogging) and a blond girl who is... Juli Vavilova.

As far as I know, she was not identified publicly at this time.

news.mail.ru/society/616852…

Image
Image
Haha they took the exact same photo 😅
Image
Image
A video has been taken

facebook.com/watch/?v=14395…
In the video I can see:
- Julia
- Gusein
- Pavel
- 2 bodyguards
- The guy with the umbrella: who is it? Another bodyguard?

We can notice that Julia has the same clothes than in her story
To sumup:

- Julia was not known as the Pavel girlfriend publicly
- In Uzbekistan, June 25, Gusein has been spotted with Pavel and an unidentified (at that time) blond girl
- Durov is probably watched by numerous intelligence services for a long time. This blond girl has probably been quickly identified as Julia (You have a lot of ways to do it)
- Julia continue to post her all life on her social networks giving a lot of info about what Pavel and his activities
Reminder: Wait few hours before posting something on social networks. If you are a public person, prohibit social networks for you but also for all your 1st circle
I can't read all the comments but please keep your misogynistic and antisemitic tweets to yourself.

• • •

Missing some Tweet in this thread? You can try to force a refresh
 

Keep Current with Baptiste Robert

Baptiste Robert Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

PDF

Twitter may remove this content at anytime! Save it as PDF for later use!

Try unrolling a thread yourself!

how to unroll video
  1. Follow @ThreadReaderApp to mention us!

  2. From a Twitter thread mention us with a keyword "unroll"
@threadreaderapp unroll

Practice here first or read more on our help page!

More from @fs0c131y

Sep 8
Three days ago, the @FBI released photos of "GRU 29155 cyber operatives": five Russian military intelligence officers and one civilian.

It's #OSINT time!
@FBI I zeroed in on Denis Igorevich Denisenko and, with the help of , mapped a portion of his digital footprint in just a few minutes.

Nothing groundbreaking, but I did uncover some interesting bits! beta.predictagraph.com

Image
Image
@FBI Денис Игоревич Денисенко appears in the Alfa-Bank data leak, with the date of birth matching the FBI's information: May 14, 1997.

The leak also includes an associated email, dalpha777@gmail.com, and phone number +7910275 0864. Image
Read 11 tweets
Aug 26
On Linkedin, Jean-Michel Bernigaud, (OFMIN chief of staff) wrote

"At the heart of this case is the lack of moderation and cooperation from the platform [..] particularly in the fight against pedocriminality."

Ultimately, it's all about content moderation.
Image
The legal showdown over this case will be monumental
I don't get why OFMIN didn't organize a press conference at this point
Read 4 tweets
Aug 23
Today, the famous hacker USDoD has been doxed by CrowdStrike.

You want to know how?

It's #OSINT time!
First the recap. This morning @TecmundoDigita published an article based on a report from CrowdStrike received from an anonymous source.

"The likely leader of the USDoD group is a 33-year-old man named Luan BG who lives in Minas Gerais, Brazil"

tecmundo.com.br/seguranca/2885…
@TecmundoDigita The article is full of info, more or less partial, without any sources. We don't have access to the initial report. I don't like that. So, at @PredictaLabOff we decided to find the truth by ourselves

Thanks to and the job is done! predictasearch.com
beta.predictagraph.com
Image
Read 27 tweets
May 20
The owner of the "Incognito Market" has been arrested. It's #OSINT time!

THREAD 1/n
Today, the @FBI announced today the arrest of RUI-SIANG LIN, a/k/a “Ruisiang Lin,” a/k/a “林睿庠,” a/k/a “Pharoah,” a/k/a “faro,” in connection with his operation and ownership of “Incognito Market,” an online dark web narcotics marketplace

justice.gov/usao-sdny/pr/i…
Image
@FBI Of course, they are doing #OSINT at the FBI. In the indictment, they mentioned the "publicly available information" about Rui-Siang Lin Image
Read 19 tweets
May 7
The identity of the Lockbit leader has been revealed. It's #OSINT time!

THREAD 1/n
Our starting point will be the specially designated nationals list. It gives 2 email adresses linked to Lockbitsupp:
- khoroshev1@icloud.com
- sitedev5@yandex.ru

src: ofac.treasury.gov/recent-actions…
Image
Thanks to , we can find a Github account and a Notion account linked to this email adresses predictasearch.com
Image
Read 31 tweets
Feb 21
Ivan Gennadievich Kondratyev, a.k.a. “Bassterlord” has been added to OFAC's SDN list

It gives us an email address. It's time for an investigation. THREAD ⬇️ ofac.treasury.gov/recent-actions…
Image
Who is Bassterlord ?

According to Jon Di Maggio from @Analyst1:
- Bassterlord is a ransomware affiliate who runs his team, known as the National Hazard Agency. Originally, he was a junior. team member, but as time progressed, he moved up the ranks and is now its leader.

- Bassterlord partnered with at least four ransomware gangs: REvil, RansomEXX, Avadon and LockBit.

- Bassterlord is a Caucasian male around 27 years old, born, raised, and living in Lugansk, Ukraine. He operates on Russian underground forums under the monikers “Fisheye,” “Bassterlord,” “Buster,” and “National Hazard Agency,” which is also the name of his team.

analyst1.com/ransomware-dia…Image
@Analyst1 First things first, I searched the email sinner4iter@gmail.com on . It gives us a lot of online profiles. predictasearch.com
Image
Read 19 tweets

Did Thread Reader help you today?

Support us! We are indie developers!


This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3/month or $30/year) and get exclusive features!

Become Premium

Don't want to be a Premium member but still want to support us?

Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal

Or Donate anonymously using crypto!

Ethereum

0xfe58350B80634f60Fa6Dc149a72b4DFbc17D341E copy

Bitcoin

3ATGMxNzCUFzxpMCHL5sWSt4DVtS8UqXpi copy

Thank you for your support!

Follow Us!

:(