Tags: osint 

Rating:

## Task
> Thanks to your OSINT work, we’re getting closer to identifying some of DEADFACE’s members. Can you figure out where lamia415 is employed?
>
> Submit the flag as: flag{Company_Branch}. Example: flag{Bank of America_Houston}.
>
> Free Hint: The answer is NOT found on LinkedIn

## Solution

Since there are no images or links provided in the challenge description we should check the [Ghost Town forum](https://ghosttown.deadface.io/) to find lamia415.[ We can find his profile here](https://ghosttown.deadface.io/u/lamia415)

These are her top topics.

![](https://miro.medium.com/v2/resize:fit:640/format:webp/1*oOqsoAxhf6nQI_DDJYR49w.png)

We are trying to find where she works, and the second thread [‘Let’s hack and sell so I can be done working’](https://ghosttown.deadface.io/t/lets-hack-and-sell-so-i-can-be-done-working/99) mentions ‘working’ so let’s check that thread first.

Scrolling through we can find a user asking lamia415 where she works

![](https://miro.medium.com/v2/resize:fit:828/format:webp/1*dSSBV9gNF9CX_flK8Ilaiw.png)

Here we can see that lamia415 works at De Monne.

We cannot find any futher info about branch.

Let’s see if she has any social media.

Simply googling ‘lamia415’ does not show anything useful, so lets check if she is connected to any social media accounts we found in previous OSINT challenges.

Let’s check Mirveal first.

We have his [Twitter](https://twitter.com/Akio08641379) and [Mastodon](https://twitter.com/Akio08641379). No connections on Twitter apart from d34th, who we aren’t concerned with in this challenge, but in Mastodon, we can find that Mirveal is following someone.

![](https://miro.medium.com/v2/resize:fit:828/format:webp/1*IHwV6xaG_XAG7OZAHMSS4A.png)

Lets check [Lorianne](https://mastodon.social/@rebelchek).

![](https://miro.medium.com/v2/resize:fit:828/format:webp/1*H6zlw_Ji1Ha7XShjVHzu0A.png)

Her nickname is lamia415, who is the person we are looking for!

This post

![](https://miro.medium.com/v2/resize:fit:828/format:webp/1*aRinUX3ObKrTWWxEqs8l3w.png)

Says that she is starting her new job at De Monne Financial at the Norwood branch

Therefore, the flag is`** flag{De Monne Financial_Norwood}**`