OSINT analyst specializing in brand protection, documenting investigations and open-source intelligence methodologies.
Investigations
Challenge Overview This exercise involved analysing a short video shared by the "Visit Tirana" on X (formerly Twitter) account on 16 February 2023. The post showed a person walking through the streets of Tirana during sunset, accompanied by the caption "Sunset in Tirana". Unlike a typical
Investigations
Objective: Identify the resort, determine the island's coordinates, and establish the cardinal direction the camera was facing when the photograph was taken. Challenge Overview This challenge provided a single photograph of a tropical island resort with very little contextual information. My objective was to determine: * The name of
Investigations
Challenge Overview This challenge revolved around a fictional arms smuggling operation involving Russian military parts being transported through multiple airbases before reaching a central hub. The challenge narrative pointed toward a network connected to former Cold War associates and international military logistics. My task was to identify the airbase shown
Methodologies
During a phishing investigation, I encountered a domain that appeared to be associated with a well-known retail brand. The domain contained login and registration pages designed to collect user credentials, yet something unusual stood out during the initial review. Despite the presence of credential-capture functionality, the targeted brand
Methodologies
During a domain abuse investigation involving a suspected phishing website, one of the details that stood out was the presence of a business registration number displayed on the website. At first glance, the website appeared to represent a legitimate organization and used branding elements intended to build trust with visitors.
Research Notes
During domain abuse investigations, it is common to focus on obvious indicators such as phishing forms, credential harvesting, or brand impersonation. However, smaller details present on a website can sometimes provide valuable investigative leads. Business registration numbers are one such example. Some websites display registration identifiers to establish credibility and
Research Notes
When dealing with operational security, the focus often falls on tooling and infrastructure: isolated environments, private networks, virtual machines, hardened browsers, and other technical safeguards. While these controls are important, they are only part of the equation. One observation that stands out across OSINT and cybersecurity workflows is that OPSEC
Investigations
Objective: Identify the university and the city where the image was taken. Challenge Overview The challenge provided a single outdoor image captured within what appeared to be a university campus. The objective was to determine: * the name of the university, * and the city where it was located. Reverse Image Search
Research Notes
While investigating suspicious phishing domains, obvious indicators such as credential-harvesting interfaces or malicious payloads may be absent. In such cases, secondary verification points can provide useful investigative leads. Common verification points include: * Business registration numbers * Public business registries * Website source code * Claimed contact information * Domain registration details * Scam reporting/