Good morning Twitter! Ready for a new thread?
Some people see the #Covid19 pandemic as an opportunity to make money on people fears. Someone on the Internet decided to sell the Oxybreath Pro, a "high-quality" crap. Let& #39;s find this assh*le
https://abs.twimg.com/emoji/v2/... draggable="false" alt="⬇️" title="Downwards arrow" aria-label="Emoji: Downwards arrow">
https://abs.twimg.com/emoji/v2/... draggable="false" alt="⬇️" title="Downwards arrow" aria-label="Emoji: Downwards arrow">
https://abs.twimg.com/emoji/v2/... draggable="false" alt="⬇️" title="Downwards arrow" aria-label="Emoji: Downwards arrow">
Some people see the #Covid19 pandemic as an opportunity to make money on people fears. Someone on the Internet decided to sell the Oxybreath Pro, a "high-quality" crap. Let& #39;s find this assh*le
Few days ago, I received a tip. A lot of french websites are redirected to a site which is selling a mask: http://jumps.me"> http://jumps.me
The redirected websites are:
- http://cups-corp.fr"> http://cups-corp.fr
- http://christophe-beche.fr"> http://christophe-beche.fr
- http://aulnois.net"> http://aulnois.net
- http://bourgeois-serigraphie.fr"> http://bourgeois-serigraphie.fr
- http://pose-ton-couplet.fr"> http://pose-ton-couplet.fr
- http://jeff64blog.fr"> http://jeff64blog.fr
- http://justinepaper.fr"> http://justinepaper.fr
I can smell something here. I decided to investigate.
- http://cups-corp.fr"> http://cups-corp.fr
- http://christophe-beche.fr"> http://christophe-beche.fr
- http://aulnois.net"> http://aulnois.net
- http://bourgeois-serigraphie.fr"> http://bourgeois-serigraphie.fr
- http://pose-ton-couplet.fr"> http://pose-ton-couplet.fr
- http://jeff64blog.fr"> http://jeff64blog.fr
- http://justinepaper.fr"> http://justinepaper.fr
I can smell something here. I decided to investigate.
On jumps[.]me, if you click on "Check the availability" you are redirected to hyperstech[.]com to validate your order.
By searching this company name on the Internet, we can find the exact same legal mentions on amazingtechsale[.]com
According to the company registry, Novads OU is located in Tallinn, Estonia and they have only 2 employees #contact-anchor">https://www.dnb.com/business-directory/company-profiles.novads_ou.e5aa25350b371d42b71b6dcb627aa5f4.html #contact-anchor">https://www.dnb.com/business-...
Did you notice the logo on the previous screenshot? The website drone720x[.]com is hosted on the same pair. This website is selling low quality drones
When you check the company address on maps, you can see... an UPS office. Weird
https://abs.twimg.com/emoji/v2/... draggable="false" alt="🤔" title="Thinking face" aria-label="Emoji: Thinking face">
The reconnaisance phase is done. Now, it& #39;s time to find who is behind this company
The WHOIS record of drone720x[.]com gives us the name of "Pjotr Novikov" who is one of the Novas OU employee
Pjotr also registered shamannn[.]xyz with his personal email
https://abs.twimg.com/emoji/v2/... draggable="false" alt="😁" title="Grinning face with smiling eyes" aria-label="Emoji: Grinning face with smiling eyes">
advico[.]fr and adscom[.]co are identical. On the website they wrote: "ADSCOM Advertising Agency is an integrated promotional advertising firm" and the credits at the bottom of the page are "Copyright © 2012 Adscom Ltd"
Adscom Ltd was a UK company dissolved on 2 July 2019 https://beta.companieshouse.gov.uk/company/11166435">https://beta.companieshouse.gov.uk/company/1...
I& #39;m not really surprised. Adscom Ltd also sell low quality drone on gadgethqs[.]com
This company is supposed to be dissolved. They don& #39;t have the right to sell stuff anymore...
Additional note on our friend Pjotr. Pjotr is a business man, he is part of the 6 company boards. Impressive for a 30 years old guy... https://www.teatmik.ee/en/personprivate/169932-Pjotr-Novikov">https://www.teatmik.ee/en/person...