Read on Twitter
1/18 Hi all, my first #OSINT report, as this morning i saw the tweet from @ebothorel regarding protec-mask[.]fr so i started to have a look at it. https://twitter.com/ebothorel/status/1249991804180738048">https://twitter.com/ebothorel...
2/ I started to have a look to the EULA (CGU) and found this:
3/ So protec-mask is linked to Shoppy Smart. A quick search return a forbidden access to shoppysmart[.]fr
![3/ So protec-mask is linked to Shoppy Smart. A quick search return a forbidden access to shoppysmart[.]fr](https://pbs.twimg.com/media/EVkfYRWWsAI3tD5.png "3/ So protec-mask is linked to Shoppy Smart. A quick search return a forbidden access to shoppysmart[.]fr")
4/ Shoppy Smart has been created 14 month ago in Sarcelles (France), we discover the first name here Jeremy Jacono :
5/ From a WHOIS we can find an email address:
6/ We can also see that is is hosted by @Shopify
7/ from googling with the email address, we can find several domains, one is interesting, icecover[.]fr
This website looks really similar to protec-mask...
But this one doesn& #39;t even have EULA (CGU) page
![7/ from googling with the email address, we can find several domains, one is interesting, icecover[.]frThis website looks really similar to protec-mask...But this one doesn& #39;t even have EULA (CGU) page](https://pbs.twimg.com/media/EVkhV2zWAAEDvvP.jpg "7/ from googling with the email address, we can find several domains, one is interesting, icecover[.]frThis website looks really similar to protec-mask...But this one doesn& #39;t even have EULA (CGU) page")
This website looks really similar to protec-mask...
But this one doesn& #39;t even have EULA (CGU) page
8/ The result of the WHOIS confirm that icecover has been registered by Shoppy Smart
9/ It also have a copyright but leads nowhere
10/ Superclim has been closed down 7 April 2017
11/ Go back to Shoppy Smart. From our WHOIS we found an address in Sarcelles where it seems to host several companies
12/ A google search on Shoppy Smart give us more details about Jeremy Jacono:
13/ We now have a new address, located in Belgium. Based on Linkedin, we can find 1 profile that match Name and location (you can google this one by yourself :) )
14/ To go a step further we can find several website where users are complaining about spams from Shoppy Smart
15/ here we have a new website gymnocephaleagrege[.]fr
and a new address, confirmed by the WHOIS:
![15/ here we have a new website gymnocephaleagrege[.]fr and a new address, confirmed by the WHOIS:](https://pbs.twimg.com/media/EVkrKZAXQAAgzNZ.png "15/ here we have a new website gymnocephaleagrege[.]fr and a new address, confirmed by the WHOIS:")
and a new address, confirmed by the WHOIS:
16/ Googling this email address gives us lot of domain registered, most of them redirect to a blank page:
17/ So it seems that this company is quite known for scams and spams. Please be careful when dealing with unknown or new websites. That was it for me, hope is was interesting enough guys :)
18/ I would like to thanks few people that inspired me with their work @fs0c131y @dutch_osintguy @FrOsint @bellingcat kudos to you guys, i& #39;m far away from you but it is always good to start somewhere.
Feel free to let me know if i missed anything or if i need to dig deeper ;)
Feel free to let me know if i missed anything or if i need to dig deeper ;)
