Share this page!

Enter URL or ID to Unroll

You can paste full URL like: https://x.com/threadreaderapp/status/1644127596119195649
or just the ID like: 1644127596119195649

How to get URL link on X (Twitter) App

  1. On the Twitter thread, click on or icon on the bottom
  2. Click again on or Share Via icon
  3. Click on Copy Link to Tweet
  4. Paste it above and click "Unroll Thread"!
  5. More info at Twitter Help
Josh Russell Profile picture
@josh_emerson
Jul 28, 2018 • 22 tweets • 14 min read • Read on X
Scrolly
ad number 1514
page Don't shoot linking to this bit.ly url
twitter.com/hawamerborsa
website has a facebook, youtube, and twitter account.
Colin Kaepernick's camp
Ad Number 2811
ad 3100
WiIliamsandKalvin advertising /officialblackgunsmatter.com

twitter.com/majtoure

archive.is/1tIge
Looks like blackmatters was using an app called thunderpenny to shortlink
How many other russian groups use this app? is it connected to C.A.? 🤔
getlinkinfo.com/info?link=http…
ad number 3176
/Hilltendo.com
was trying to tell people about this in October 2017:
ad number 3223
url for /black4black.info another ITL hosted site.
one of about 12 different domains ITL hosted for the IRA.
1st noticed by the WSJ
ad number 3506
/dudeers.com

couple good items here:
previously unknown facebook account Memopolis
and i take that back for /black4black.info it wasn't hosted by ITL networks

it was hosted by Hetzner Online GmbH, who also hosts LOTS of other fake news and russian linked websites

144.76.190.201

ipinfo.io/144.76.190.201
/bestcelebnews.info
/black4black.info
/patriotsus.com <----the website the internet research agency used to sign people up for the florida rally
/dudeers.com
money.cnn.com/2018/02/20/med…
more about Hetzner Online GmbH can be found here:

reddit.com/r/ActiveMeasur…
ad 2438
new group
facebook.com/BlackEdificati…
Ad ID 2459
facebook.com/iloveblackexce…
Ad ID 1298
Eric Draitser - not redacted - wonder why? 🤔
facebook.com/EricDraitser1
Ad ID 2964
Defend the 2nd gave away shooting range time in Gainesville florida.
Gun, 100 rounds included.
white house petition gaming is and was a constant thing with the russians

breitbart.com seemingly knew every single one the russsains promoted

breitbart.com/tech/2016/07/1…
ad 749 still links to a live facebook group
Texas Independence Rally Volunteers
facebook.com/groups/4180062…
ad 1023
Blacktivist selling #NotMyPresident t-shirts on represent.com
represent.com/store/notmypre…
they changed the store url a few times web.archive.org/web/2016120102…
ad 1183
"Choose peace and vote for Jill Stein. Trust me, it's not a wasted vote."
ad number 1270
Currently links to a LIVE facebook page.
Created in march 2016
name has not changed
Group was named in the DOJ's Internet Research Agency Indictment.
Is this an FBI honeypot?

justice.gov/file/1035477/d…

• • •

Missing some Tweet in this thread? You can try to force a refresh
　

Keep Current with Josh Russell

Josh Russell Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

PDF

Twitter may remove this content at anytime! Save it as PDF for later use!

Try unrolling a thread yourself!

how to unroll video
  1. Follow @ThreadReaderApp to mention us!

  2. From a Twitter thread mention us with a keyword "unroll"
@threadreaderapp unroll

Practice here first or read more on our help page!

More from @josh_emerson

Josh Russell Profile picture
Oct 5, 2018
The flow of russian disinformation, and how russian cyber warfare works:

GRU hacks, russian media writes about it, russian bots take to twitter.

The bots I am looking at tweeted about "Cyber Berkut".

ncsc.gov.uk/news/reckless-…
GCHQ attributes Cyber Berkut to GRU.

In just what happened to be an odd coincidence I happened to be looking at russian bots when @rob_barry did a thread about "CyberCaliphate"
At some point in march 2014 after the russian invasion of crimea GRU setup Cyber Berkut and started attacking various Ukrainian infrastructure and websites.
motherjones.com/politics/2014/…
Read 24 tweets
Josh Russell Profile picture
Sep 17, 2018
There is definitely something going on.
If you look around twitter there are some very "odd" accounts.

#Macedonia #RussianMeddling #Russia #Skopje
apnews.com/b51d832612784b…
These tweets seem weird to me.
One uses a #QAnon hashtag.
Looking at those accounts you coma across these accounts:
twitter.com/makedon_on
twitter.com/SrebreniKopja
twitter.com/MAKEDONIJAeSE
twitter.com/MEbakj
twitter.com/Gogo78114891
twitter.com/vibamsorosite
twitter.com/angarija
twitter.com/PavlePetkovski
twitter.com/pipovski
Read 16 tweets
Josh Russell Profile picture
Aug 25, 2018
There are more of these thread.

Suspected Iranian Influence Operation Leverages Network of Inauthentic
News Sites & Social Media Targeting Audiences in U.S., UK, Latin
America, Middle East
fireeye.com/blog/threat-re…
we got 9 urls from FireEye's report.
and I had flagged another 13 back in march.

Mostly due to these reddit users:
/u/Mike_Rubin
/u/AllenDono
/u/finalin
/u/KevanKing
/u/Pazaj
/u/erickiskandar
Most of these sites share OR shared a common host at some point in time.
AS24940 hetzner[.]com
Read 61 tweets
Josh Russell Profile picture
Aug 4, 2018
Quick thread about a small set of bots I ran into this morning. Every once in a while I randomly check the @SecureDemocracy dashboard it's usually the same things. Today #WeAreCorbyn popped up. Figured I would check it out. #Botspot #Russia #KremlinTrolls
Tweeting this kinda as I go.
1st thing pull data on the hashtag.
visual studio code, python, and tweepy.
I only pulled about 40k tweets, not that many.
next step is to crack open that .csv file and remove all the duplicate accounts leaving only one row per account.
Then start sorting. IF there is a pattern you will notice it almost immediately.

Here 16 accounts show up with the same stats, sorted by tweet source. Bots.
Read 11 tweets
Josh Russell Profile picture
Aug 1, 2018
From the Senate Intelligence hearing on social media and foreign influence
intelligence.senate.gov/sites/default/…
websites they linked to:
some of these are new.
.ihavethetruth.com was for sure russian
securitytrails.com/domain/ihaveth…
It sat on a Choopa, LLC's server before being moved to cloudflare
Read 24 tweets
Josh Russell Profile picture
Jul 31, 2018
We have asked every social media platform for months now to take action @Reddit, @facebook, @Twitter will only do something after someone gets killed.

Michael Avenatti Targeted in Person by QAnon, the Crazy Pro-Trump Conspiracy Theory thebea.st/2M3HFig?source… via @thedailybeast
Facebook right now:
Reddit:
Read 11 tweets

Did Thread Reader help you today?

Support us! We are indie developers!

This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3/month or $30/year) and get exclusive features!

Become Premium

Don't want to be a Premium member but still want to support us?

Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal

Or Donate anonymously using crypto!

Ethereum

0xfe58350B80634f60Fa6Dc149a72b4DFbc17D341E copy

Bitcoin

3ATGMxNzCUFzxpMCHL5sWSt4DVtS8UqXpi copy

Thank you for your support!

Follow Us!

Send Email!

:(