Thread 🧵2/11: The domain name was purchased on 15 March 2024. Only 24 hours after Macron's speech on French TV, he said on 14 March 2024: “If the situation were to deteriorate, we must be ready and we will be ready” If we look at the creation date and…

Thread 🧵3/11: The domain was purchased with 1API GmbH 1API GmbH Kaiserstraße 172-174 66386 St. Ingbert, Germany Phone: +49.6894.9396-760 Email: abuse @1api .net CEO: Oliver Fries & Johannes Steck Tax ID: 075/108/00766 V.A.T. ID: DE248636780

Thread 🧵4/11: Hostwinds LLC 🇺🇸 is the hosting provider (as indicated by the name servers). nserver: nserver: The nameservers point to the servers where the actual website content resides. Hostwinds LLC is a Seattle-based web…

Thread 🧵5/11: The website was frozen today and taken down by @Hostwinds , probably following a complaint from the French Government. We now get taken to a new URL --> By manipulating the URL to --> , we can see an email address -->…

Thread 🧵6/11: Some interesting information in the source code. Notice how the work on the website is always within the same timeframe, always in the afternoon. Domain Name purchase date and time: 2024-03-15 15:29:04 Domain Name update date and time:…

Thread 🧵7/11: The images on are renamed in French, meaning the entity who created the website worked hard not to leave any traces in their own language. For example, the image of "Capitaine Paul" is under the title smaller_avatar.jpeg on…

Thread 🧵8/11: The page on joining the French Special Forces was easy to detect as a complete fake! It states: "Under military status, your specialty consists of gathering intelligence via special interventions behind Russian lines". The salary being offered is 9000€ (gross…

Thread 🧵9/11: Certificate search on #OSINT

Thread 🧵10/11: No emails are visible on the website, legal mentions, cookies policy, conditions, and confidentiality pages were copied from the real website . But there is 2 contact forms that surely go to the entity behind this fake website. #OSINT

Thread 🧵11/11: First account to post about it on X is a French account. I used advanced search with the dorks and exact phrase "" and then sorted from most recent to oldest. #OSINT

Here is the list of channels on Telegram who mentioned the website - Silvano Trotta Officiel - Politopticon - Правдивости - Голос Мордора - Радио Стыдоба - Саня во Флориде - ПЕРЕСВЕТ 🇷🇺🎼 - НОВОСТИ & СМЕХ - Гагаузская Республика - Кусь Zа Русь |…

@OSINT_Tactical @threadreaderapp unroll

@OSINT_Tactical There was also today a fake ad of the French army for a recruitment to fight in Ukraine

@OSINT_Tactical Interesting. Great research done on your side. As usual. Cui bono? Some seem to be very keen that Europe is pulled into this war.

@OSINT_Tactical Excellent research as always. 😎 keeping the world sane over here

@OSINT_Tactical @Thinker_View