Search content
Sort by
Showing 15 of 15 results by nonBCuser
Well, today someone cashed out of both accounts! From one account they had about 3.7 BC and the other about .7 BC, a little short of the goal. I was hoping the password to that RAR file would be broadcast somehow though. I still have it.
By the way, here is a screenshot of the RAR file from the new message. One thing I find interesting is that the files were all last modified on the same day, January 7, 2012. This, as I understand it, would be before pirateat40's scam, right? Might these actually be Romney's tax returns? (Another possibility, is it possible to fake the modified date?)
http://s7.postimage.org/ug72h2457/Rar_Screen_Shot.png
http://s7.postimage.org/ug72h2457/Rar_Screen_Shot.png
If you know how to use a program's language, you have the proper code decompiler and hex editor, ANYTHING is possible...
Almost anything. You can't double spend your bitcoins.
By the way, here is a screenshot of the RAR file from the new message. One thing I find interesting is that the files were all last modified on the same day, January 7, 2012. This, as I understand it, would be before pirateat40's scam, right? Might these actually be Romney's tax returns? (Another possibility, is it possible to fake the modified date?)
http://s7.postimage.org/ug72h2457/Rar_Screen_Shot.png
http://s7.postimage.org/ug72h2457/Rar_Screen_Shot.png
The message was actually found fully the other day on Reddit with the release of one of the tax forms as evidence. Good call but youre a little late to the party.
There have been two messages since the ones posted to reddit. One two days after the reddit decrypt, and one last night/this morning (depending on your time zone).You can see this by checking the time stamp (although all the details are in this thread).
The reddit thread died a few hours after their decrypt. It seems everyone decided it was a hoax and lost interest. They are probably right about the hoax part, so if you just wanted Romney's tax returns then chances are slim. But if you are interested in bitcoin itself there is some interesting stuff there. Read through this thread to see what's happened since.
A message came through in binary again:
0111000101110110011000100110111000101111011011110110001100101110011110000010111 1001011110011101001110000011101000111010001101000
Translates to:
qvbn/oc.x//:ptth
which of course is just http://x.oc/nbvq backwards
which leads to a .rar file which I downloaded, but it is password protected!
0111000101110110011000100110111000101111011011110110001100101110011110000010111 1001011110011101001110000011101000111010001101000
Translates to:
qvbn/oc.x//:ptth
which of course is just http://x.oc/nbvq backwards
which leads to a .rar file which I downloaded, but it is password protected!
At the Texas address from [Suspicious link removed]/9bxyde9, if you zoom out you see the building is business by the name of "Austin Foreclosures in Austin Texas" that links you here: http://www.austinfreeforeclosurelist.com/
At that tinyurl address, on the right hand side, google says two businesses are located there:
Northwest Registered Agent LLC
Petro Lucre LLC
One is a business that helps set up oversea bank accounts, and the other one has something to do with energy. If this is their answer to prove it, it's possible Romney has some investments that might make him look even worse. Maybe he made money off from the housing meltdown and home foreclosures, alternative energy, or had an account with Northwest... I really have no clue, but it is fun to google. I felt the need to hop on here and add my two cents after spending an hour or so looking through clues.
At that tinyurl address, on the right hand side, google says two businesses are located there:
Northwest Registered Agent LLC
Petro Lucre LLC
One is a business that helps set up oversea bank accounts, and the other one has something to do with energy. If this is their answer to prove it, it's possible Romney has some investments that might make him look even worse. Maybe he made money off from the housing meltdown and home foreclosures, alternative energy, or had an account with Northwest... I really have no clue, but it is fun to google. I felt the need to hop on here and add my two cents after spending an hour or so looking through clues.
I agree, I like the thrill of the speculation and I hope you're having fun!
http://i.imgur.com/9os2f.png
tinyurl links to this place in google maps:
815 Brazos St Ste 500 Austin, TX 78701
tinyurl links to this place in google maps:
815 Brazos St Ste 500 Austin, TX 78701
Anyone else think it strange that the google maps used was maps.google.co.uk? Is someone trying to hide their location or did they accidently give it away. (Strange if some people from the UK might be the hackers).
there's a new message flowing in :-)
And I'm somewhat new... I heard some guy pirateat40 had some sort of ponzi scheme, but do you guys think someone would actually try to frame him with something like this?
By the way, if you appreciate the research from before -decoding, the phone numbers, the activity reported- I am happy to say my username is no longer accurate and I will gladly accept any tips at 15nkjVFc46bkRVKqfJ8BfEocbxiYQL6buV .
at 15nkjVFc46bkRVKqfJ8BfEocbxiYQL6buV .Wouldn't surprise me if these criminal genius's hit the $20 mark by the end of the weekend!
According to http://nandbit.com/romney/ They've already passed it!
Sorry if this is stating the obvious it just hasn't been said, could it be a communication between someone and the person who claims to hold the tax return i.e:
Person who claims to hold the tax return via letter to media: blah blah we've got Romnys tax return blah blah
someone: prove it
Person who claims to hold the tax return: www.imager/i....
......either making it look like they tried, ran out of bitcoins, or got bored halfway through posting link.
Person who claims to hold the tax return via letter to media: blah blah we've got Romnys tax return blah blah
someone: prove it
Person who claims to hold the tax return: www.imager/i....
......either making it look like they tried, ran out of bitcoins, or got bored halfway through posting link.
ha! interesting theory! can be...
A business owner or comedy artist could take the opportunity to complete the image link with a string of small donations and potentially get world wide media coverage of whatever pic they want.... and probably a knock on the door from the FBI!
Lol... though the picture file would have to end in ".png" or ".jpg" I think? I'm not actually sure about that
Follow up:
I figured that maybe the anons replied somehow. How would the reply? sending messages back using bitcoins of course! I.e. back to the addresses that sent them the bitcoins. There are a few of these address though, and most of them are completely emptied out, but if you look at this address:
1A68Zamnv9yCHEYKbrvyPW6TQ8oANhhQ1y
http://blockchain.info/address/1A68Zamnv9yCHEYKbrvyPW6TQ8oANhhQ1y
It got back the message:
.00032
.00024
.00008
in binary:
00100000
00011000
00001000
Which AFAIK are just spaces.
Update: Also found something similar at 1LwLbxQUqVv4gS1anbDU3wY6jakih8s8Jc,
http://blockchain.info/address/1LwLbxQUqVv4gS1anbDU3wY6jakih8s8Jc
Message:
.0003
again just a space when translated to binary
Found another one (.0003) to
http://blockchain.info/address/1LwLbxQUqVv4gS1anbDU3wY6jakih8s8Jc
Found another one (.00032, .00024, .00008)
http://blockchain.info/address/1A68Zamnv9yCHEYKbrvyPW6TQ8oANhhQ1y
Update 2: I started looking at possible responses to the "for release" option, and it seems to be a process that is on going:
http://blockchain.info/address/1NNpaaasYkogJEuUidrpKigFEPFdn5z6jy
(Here you see the .00032 already sent a few minutes ago.)
Update 3: Due to lack of interest, I'll stop updating this and go on with life, but for completeness I found several of those .00032, .00024, .00008 responses to different addresses that had sent the anons money. Also, 615-762-9138 seems to be a phone number someone wants the anons to call. (Look at the BC transaction that is .07629138 then just use the area code of the PricewaterhouseCooper's branch that was hacked, which is 615).
I figured that maybe the anons replied somehow. How would the reply? sending messages back using bitcoins of course! I.e. back to the addresses that sent them the bitcoins. There are a few of these address though, and most of them are completely emptied out, but if you look at this address:
1A68Zamnv9yCHEYKbrvyPW6TQ8oANhhQ1y
http://blockchain.info/address/1A68Zamnv9yCHEYKbrvyPW6TQ8oANhhQ1y
It got back the message:
.00032
.00024
.00008
in binary:
00100000
00011000
00001000
Which AFAIK are just spaces.
Update: Also found something similar at 1LwLbxQUqVv4gS1anbDU3wY6jakih8s8Jc,
http://blockchain.info/address/1LwLbxQUqVv4gS1anbDU3wY6jakih8s8Jc
Message:
.0003
again just a space when translated to binary
Found another one (.0003) to
http://blockchain.info/address/1LwLbxQUqVv4gS1anbDU3wY6jakih8s8Jc
Found another one (.00032, .00024, .00008)
http://blockchain.info/address/1A68Zamnv9yCHEYKbrvyPW6TQ8oANhhQ1y
Update 2: I started looking at possible responses to the "for release" option, and it seems to be a process that is on going:
http://blockchain.info/address/1NNpaaasYkogJEuUidrpKigFEPFdn5z6jy
(Here you see the .00032 already sent a few minutes ago.)
Update 3: Due to lack of interest, I'll stop updating this and go on with life, but for completeness I found several of those .00032, .00024, .00008 responses to different addresses that had sent the anons money. Also, 615-762-9138 seems to be a phone number someone wants the anons to call. (Look at the BC transaction that is .07629138 then just use the area code of the PricewaterhouseCooper's branch that was hacked, which is 615).
Maybe the message isn't complete or there is another QR code... I have no idea! (I detailed all my workings in the first post. If anyone has any suggestions on pertinent info glossed over on those pages, please share )
)Hi all, first post.
So by now I assume you've heard of the alleged "hack" of Romney's tax returns and the demands for 1 mill USD worth of bitcoins. Recall that the anons said you could donate bitcoins to one address if you want the records kept secret and another address if you want them released. Here are the blockchain.info links for each:
If you want them kept secret:
http://blockchain.info/address/1HeF89wMjC48bWNgWvVo7Wu3RaLW8XVsE8
If you want them released:
http://blockchain.info/address/12AP6iCwRNFQqKLStH3A4b4hw3SL6RaNgB
For both addresses there is a string of transactions of amounts that are binary numbers that correspond to ascii characters, so each address received a message through the transactions in ascii. I haven't seen anyone comment on this yet so I translated the binary strings to ascii characters and this is what I found:
If you look at the transactions to the "release" option, the message says:
"prove it"
If you look at the transactions to the "keep secret" option, the message says:
"gnp.fR6k5/moc.rugmi.i//:ptth"
which is "http://i.imgur.com/5k6Rf.png" backwards.
If you go to that web address you get this image:
http://i.imgur.com/5k6Rf.png
I put up a mirror here:
http://s16.postimage.org/jxr8st6md/5k6_Rf.png
2nd mirror:
http://i48.tinypic.com/2n9ml1i.png
And that's it. Unfortunately I am from the stone age so I don't have a smartphone that can "read" this, so if anyone interested can I would appreciate to know what it says.
Update: Okay after some astute googling, I used an online QR decoder to read the image. It gives the following:
"0110100001110100011101000111000000111010001011110010111101101001001011100110100 1011011010110011101110101011100100010111001100011011011110110110100101111011010 01"
which with binary-to-ascii converter is http://i.imgur.com/i which is an image that no longer exists I guess.
So by now I assume you've heard of the alleged "hack" of Romney's tax returns and the demands for 1 mill USD worth of bitcoins. Recall that the anons said you could donate bitcoins to one address if you want the records kept secret and another address if you want them released. Here are the blockchain.info links for each:
If you want them kept secret:
http://blockchain.info/address/1HeF89wMjC48bWNgWvVo7Wu3RaLW8XVsE8
If you want them released:
http://blockchain.info/address/12AP6iCwRNFQqKLStH3A4b4hw3SL6RaNgB
For both addresses there is a string of transactions of amounts that are binary numbers that correspond to ascii characters, so each address received a message through the transactions in ascii. I haven't seen anyone comment on this yet so I translated the binary strings to ascii characters and this is what I found:
If you look at the transactions to the "release" option, the message says:
"prove it"
If you look at the transactions to the "keep secret" option, the message says:
"gnp.fR6k5/moc.rugmi.i//:ptth"
which is "http://i.imgur.com/5k6Rf.png" backwards.
If you go to that web address you get this image:
http://i.imgur.com/5k6Rf.png
I put up a mirror here:
http://s16.postimage.org/jxr8st6md/5k6_Rf.png
2nd mirror:
http://i48.tinypic.com/2n9ml1i.png
And that's it. Unfortunately I am from the stone age so I don't have a smartphone that can "read" this, so if anyone interested can I would appreciate to know what it says.
Update: Okay after some astute googling, I used an online QR decoder to read the image. It gives the following:
"0110100001110100011101000111000000111010001011110010111101101001001011100110100 1011011010110011101110101011100100010111001100011011011110110110100101111011010 01"
which with binary-to-ascii converter is http://i.imgur.com/i which is an image that no longer exists I guess.