The investigation into the deadly Red Fort blast that killed 13 people on November 10 has unveiled a chilling web of terror networks spanning Delhi, Haryana, Uttar Pradesh, and Kashmir. As agencies sift through CCTV footage, encrypted chats, and forensic trails, a clearer picture is emerging of how a group of educated professionals allegedly plotted one of the most audacious terror conspiracies in recent years.
The probe has exposed a “white-collar” Jaish-e-Mohammad (JeM)-linked module led by doctors from Kashmir who used Al-Falah University in Faridabad as their base. The group reportedly received guidance from a handler in Turkiye, coordinated on encrypted apps like Signal and Threema, and planned multiple blasts across India.
10 key points about Red Fort blast probe
Where the plot began
Police said the conspiracy was hatched inside Al-Falah University, a private institution in Faridabad. 2,900 kg of explosives were recovered from its premises and nearby locations. Three Kashmiri doctors — Dr Umar Un Nabi, Dr Muzammil Ahmad Ganaie, and Dr Muzaffar Rather — were allegedly the masterminds. They stored ammonium nitrate, potassium nitrate, and sulphur in small quantities before assembling improvised explosive devices (IEDs). The trio used the campus’s laboratories and rented rooms for storage. Following the blast, the government ordered a forensic audit of the university’s finances and the Enforcement Directorate was asked to trace its money trail. The Association of Indian Universities suspended Al-Falah’s membership citing “irregularities”.
‘White-Coat Terrorists’: Doctors led the module
The group was dubbed a “white-collar” or “white-coat” terror module because most accused were medical professionals. PTI reported that Dr Umar, who drove the explosives-laden Hyundai i20, was a 28-year-old doctor from Qazigund, Kashmir. Dr Muzammil and Dr Muzaffar were his close associates. Another, Dr Shaheen Sayeed from Lucknow, was accused of providing logistical support. Investigators found that they radicalised peers at Al-Falah, using Telegram and Signal for coordination. The police have sought an Interpol Red Corner Notice for Muzaffar, who fled India in August and is believed to be in Afghanistan.
Turkiye connection: The ‘Ukasa’ link
The plot’s international dimension was uncovered when investigators traced a handler in Turkiye, codenamed Ukasa. He allegedly acted as the conduit between the Delhi-based doctors and leaders of JeM and Ansar Ghazwat-ul-Hind. Dr Umar and his associates had travelled to Turkiye in 2021–22, where they received ideological training. Ukasa reportedly instructed them on how to establish covert cells and communicate without detection. The National Investigation Agency (NIA) is coordinating with foreign counterparts to track his digital footprint.
The Mosque connection and the final hours
CCTV footage analysed by Delhi Police, cited by PTI, revealed Dr Umar’s last movements. After leaving Faridabad, he was seen stopping for food near Nuh before entering Delhi through the Badarpur border. He looped across multiple areas — Okhla, Connaught Place, and Ashok Vihar — before parking near a mosque close to Asaf Ali Road, where he stayed for nearly three hours. Police believe he offered prayers and received instructions before driving toward the Red Fort Metro Station, where his car exploded at 6:52 pm.
The ‘Room 13 Diaries’
Investigators found coded notebooks and diaries from Room 13 and Room 4 at Al-Falah University, belonging to Dr Muzammil and Dr Umar respectively. As per PTI, the documents contained dates between November 8–12, coded names, and numerical sequences. The repeated mention of the word “operation” suggested detailed coordination. References to 25–30 individuals, mostly from Kashmir and Haryana, indicated a large, decentralised network. Police believe the diaries outlined phases of the operation, including procurement, transport, and execution.
Four cities targeted
According to ANI, the module had planned simultaneous blasts in four cities. Eight suspects were to split into pairs, each assigned to one city. The targets were believed to include Delhi and Ayodhya, where an attack was allegedly planned around November 25 to coincide with Ram temple events. Each pair was to travel with multiple IEDs for coordinated strikes, mirroring tactics used in earlier JeM operations. Intelligence sources said at least two more vehicles — a red Ford EcoSport and a Maruti Brezza — were being modified for attacks.
Money trail and explosives network
Police told PTI that the suspects pooled over ?26 lakh in cash, which Dr Umar managed for operations. The funds were used to purchase 26 quintals of NPK fertiliser from dealers in Gurugram and Nuh. This fertiliser, when mixed with chemicals, forms a key component of homemade explosives. A total of 2,900 kg of explosive substances were seized across Faridabad, confirming large-scale preparation. Authorities suspect additional funding from abroad, possibly routed via hawala channels linked to Turkiye and Pakistan.
December 6 Connection
Dr Shaheen reportedly told interrogators that the attack planning coincided with the anniversary of the Babri Masjid demolition on December 6. Officials suspect the date was chosen to trigger communal tension. The group referred to December 6 as “Operation D-6” in their notes, according to ANI. Investigators believe this symbolic choice underscores the ideological motivation of the JeM-linked cell. The timing, they said, reflected an intent to cause maximum national disruption and political impact.
What DNA test from blast site revealed
Delhi Police confirmed via DNA profiling that Dr Umar Un Nabi was the driver of the car that exploded. PTI reported that his leg was found trapped between the steering wheel and accelerator, confirming he was behind the wheel. His remains were matched with samples from his mother and brother at AIIMS. Investigators believe the explosion was premature — possibly triggered accidentally while he was assembling or arming the IED inside the car.
A wider terror web
As ANI reported, the Delhi blast is only the visible part of a larger conspiracy. The module had prepared plans for 32 vehicles to be fitted with explosives for coordinated strikes. Police recovered a red Ford EcoSport linked to Dr Umar and are searching for a missing Maruti Brezza. Over 350 kg of ammonium nitrate and traces of RDX have been seized so far. Investigators are now probing whether the group was preparing to form a new outfit aligned with ISIS’s India affiliates. The Home Ministry has ordered a multi-agency review, while calls grow for an all-party discussion in Parliament on the attack.
(With inputs from agencies)
Select The Times of India as your preferred source on Google Search