France
Firearms Retail
Identity & Licence Documents
For Sale
Unverified
Armurerie Douillet Data Sale Claim Includes 7,546 Files With Firearms Licence and Identity Documents
Overview
An actor using the handle "ChimeraZ" claims to be selling data associated with Armurerie Douillet, a French retailer specializing in hunting, shooting sports, firearms and related equipment.
The listing advertises 4.65 GB across 7,546 files in PDF and image formats. The actor claims the folders contain approximately 1,900 FFTIR/SIA licences, 1,200 identity cards, 700 prefectural decisions relating to weapons possession, 400 records concerning weapons obtained, 300 proof-of-address / RIB / credit-card documents and 200 passports. The material is offered for sale with payment requested in XMR and escrow accepted. The dataset, its source, the stated counts and the actor's possession of the full material have not been independently verified.
Post details
FranceWhat the post claims
- 7,546 files advertised
- 4.65 GB of data advertised
- PDF and image formats
- Approximately 1,900 FFTIR/SIA licences
- Approximately 1,200 identity cards
- Approximately 700 prefectural weapons-possession decisions
- Approximately 400 records concerning weapons obtained
- Approximately 300 proof-of-address / RIB / credit-card documents
- Approximately 200 passports
- Names and dates of birth listed in prefectural-decision records
- Birth country and place fields listed
- Address and postal-code fields listed
- Authorization-number fields listed
- Reason-for-detention and validity fields listed
- 200 samples advertised
- XMR payment requested
- Escrow accepted
The visible field description for prefectural decisions includes identity, address and authorization information. The actor also provides multiple links to sample archives; those sample-download URLs are not reproduced in this report.
Screenshots
IOCs & contact identifiers
Identifiers directly visible in the listing. These support correlation and do not independently verify the dataset claim.
| Type | Identifier | Source |
|---|---|---|
| Actor handle | ChimeraZ | Screenshot 1 |
| Session ID | 05c1396ee8a9d6df7ae4497a07f2fbc75b31344f5e0cbd91dacde4c04c88c4c25 | Screenshot 2 |
| Named organization domain | armurerie-douillet[.]com | Screenshot 1 |
The domain identifies the organization named in the claim, not malicious infrastructure. No Tox ID, Telegram handle, malware hash or attacker-controlled IP address is visible. Personal identifiers shown in the purported evidence are not included in this table. The sample-download URLs shown in the source material are not reproduced here. URLs to any data will always be blurred out, but are available for subscribers on the threat feed or ransomware feed.
Mapped techniques
Claimed identifies behavior explicitly described by the actor. Inferred identifies an analytical mapping supported by the supplied material. Neither label means the activity has been independently verified.
- Collection T1213.006 Data from Information Repositories: Databases Inferred The actor claims possession of a structured collection of identity, licensing, authorization and transaction-related documents. The supplied material does not reveal the acquisition method or independently establish unauthorized access to Armurerie Douillet systems.
Potential impact
If authentic, the claimed material could expose identity documents, home addresses, banking information, firearms licences, authorization records and information about weapons possession. This combination could increase risks of identity fraud, financial fraud, targeted phishing and physical-security concerns for affected customers.
Status Unverified
Dark Web Informer has not independently verified the authenticity, source, completeness, 4.65 GB size, 7,546-file count or current availability of the purported dataset. The supplied screenshots document the actor's listing and stated contents, not independent confirmation of the underlying files.
