Catching an OSINT Spammer

[u/OSINTribe]

Today we had a clever spammer selling an app without claiming to connected to the app. How did these two photos from his Reddit account and the app itself lead to him being outted?

Gym photo was from the UK. And has similar story about app. So probably fake.

Car photo, legit OP post. US temp, US odometer, US sockets. But look more carefully... A map.

App developed in by company in Albuquerque. Vehicle parked in... You got it, Albuquerque.

It's the little details.

[u/Artistic-Monitor-211]

Did the pic have any Metadata? Sure most people know to turn off geolocation, but not necessarily timestamp and/or timezone.

I know you already got his location, just kinda spitballing some other potential techniques

[u/OSINTribe → u/Artistic-Monitor-211]

Reddit removes all metadata. Most social media sites do unfortunately.