3 ms·

This technique was recently done by some redditors to uncover that the multi-state COVID reopen protest is being pushed by some guy who uses an antique shop in

This technique was recently done by some redditors to uncover that the multi-state COVID reopen protest is being pushed by some guy who uses an antique shop in FL as a front for his shell LLCs. They are the websites that are being used on the facebook pages that are primarily pushing 'reopen' content, and the GA accounts on those pages links them to a bunch of pro-firearm shell corps as well. Here's the thread. It got deleted since it was deemed as doxxing (a reddit no-no) even though Whois data is public: http://removeddit.com/r/maryland/comments/g3niq3/i_simply_cannot_believe_that_people_are/fnstpyl http://removeddit.com/r/maryland/comments/g3niq3/i_simply_ca...

whycombagator 7y ago
Sadly I get “Could not connect to Reddit“ when visiting that link
- behindsight 7y ago
  You'd need to disable tracking protection or whatever equivalent in your browser. It's a known issue with removeddit. If you check your console log, you'll see: > Tracking Prevention blocked an XHR request to https://www.reddit.com/api/v1/access_token https://www.reddit.com/api/v1/access_token.
maxchehab 7y ago
Krebs also mentioned this in his recent post https://krebsonsecurity.com/2020/04/whos-behind-the-reopen-domain-surge/ https://krebsonsecurity.com/2020/04/whos-behind-the-reopen-d... A very interesting way to associate the same site owners!
- LegitShady 7y ago
  Look at the updates on that post, nothing is so clear cut. The problem with internet sleuthing is that everyone gets very excited and innocent people can be injured in the unnecessary witch-hunt. >Update, April 21, 6:40 a.m. ET: Mother Jones has published a compelling interview with Mr. Murphy, who says he registered thousands of dollars worth of “reopen” and “liberate” domains to keep them out of the hands of people trying to organize protests. KrebsOnSecurity has not be able to validate this report, but it’s a fascinating twist to this tale: How an ‘Old Hippie’ Got Accused of Astroturfing the Right-Wing Campaign to Reopen the Economy Update, April 22, 1:52 p.m. ET: Mr. Murphy told Jacksonville.com he did not register reopenmn.com or reopenpa.com, contrary to data in the spreadsheet linked above. I looked up each of the records in that spreadsheet manually, but did have some help from another source in compiling and sorting the information. It is possible the registration data for those domains got transposed with reopenmd.com and reopenva.com, which included Mr. Murphy’s information prior to being redacted by the domain registrar.
  - panda-giddiness 7y ago
    Right, and this is exactly why reddit bans doxxing. The original reddit poster was correct that there was a single individual buying most of these domains; however, other than purchasing the domains, there was no evidence that the individual was using those domains to promote protests. Let's not forget reddit's Boston bombing debacle[1]. [1] https://en.wikipedia.org/wiki/Sunil_Tripathi#Misidentification https://en.wikipedia.org/wiki/Sunil_Tripathi#Misidentificati...

whycombagator 7y ago

Sadly I get “Could not connect to Reddit“ when visiting that link

behindsight 7y ago
You'd need to disable tracking protection or whatever equivalent in your browser. It's a known issue with removeddit. If you check your console log, you'll see: > Tracking Prevention blocked an XHR request to https://www.reddit.com/api/v1/access_token https://www.reddit.com/api/v1/access_token.

maxchehab 7y ago

Krebs also mentioned this in his recent post https://krebsonsecurity.com/2020/04/whos-behind-the-reopen-domain-surge/ https://krebsonsecurity.com/2020/04/whos-behind-the-reopen-d... A very interesting way to associate the same site owners!

LegitShady 7y ago
Look at the updates on that post, nothing is so clear cut. The problem with internet sleuthing is that everyone gets very excited and innocent people can be injured in the unnecessary witch-hunt. >Update, April 21, 6:40 a.m. ET: Mother Jones has published a compelling interview with Mr. Murphy, who says he registered thousands of dollars worth of “reopen” and “liberate” domains to keep them out of the hands of people trying to organize protests. KrebsOnSecurity has not be able to validate this report, but it’s a fascinating twist to this tale: How an ‘Old Hippie’ Got Accused of Astroturfing the Right-Wing Campaign to Reopen the Economy Update, April 22, 1:52 p.m. ET: Mr. Murphy told Jacksonville.com he did not register reopenmn.com or reopenpa.com, contrary to data in the spreadsheet linked above. I looked up each of the records in that spreadsheet manually, but did have some help from another source in compiling and sorting the information. It is possible the registration data for those domains got transposed with reopenmd.com and reopenva.com, which included Mr. Murphy’s information prior to being redacted by the domain registrar.
- panda-giddiness 7y ago
  Right, and this is exactly why reddit bans doxxing. The original reddit poster was correct that there was a single individual buying most of these domains; however, other than purchasing the domains, there was no evidence that the individual was using those domains to promote protests. Let's not forget reddit's Boston bombing debacle[1]. [1] https://en.wikipedia.org/wiki/Sunil_Tripathi#Misidentification https://en.wikipedia.org/wiki/Sunil_Tripathi#Misidentificati...