FANDOM


Operation "Gotta get 'em all!"

From http://uncovering-cicada.wikia.com/wiki/TOR_2_ver_2_back_ONLINE#PINGING we got a third onion address which dumps the following message via HTTP:

curl -i --socks4a 127.0.0.1:9050 "http://pklmx2eeh6fjt7zf.onion"

< HTTP/1.1 200 OK
< Date: Tue, 15 Jan 2013 12:44:19 GMT
< Server: Apache/2.2.22
< Last-Modified: Sat, 12 Jan 2013 20:40:28 GMT
< ETag: "380b2-74d-4d31d6c1a0700"
< Accept-Ranges: bytes
< Content-Length: 1869
< Vary: Accept-Encoding
< Content-Type: text/html
<
         -----BEGIN PGP SIGNED MESSAGE-----
         Hash: SHA1
         
         
         Standby for coordinates.
         
         -----BEGIN PGP SIGNATURE-----
         Version: GnuPG v1.4.11 (GNU/Linux)
         
         iQIcBAEBAgAGBQJQ8J48AAoJEBgfAeV6NQkPfIAP+wdCz/4fw6SHZrFMonpOTwwN
         K93vi1/E/o0Vw1sEZXtCPgtbetZXVfCZ/CSU3Gez1l1Q2Yr6VSBZtPZswyDETSvU
         1ObpYpaL//fUcOtIiL4EH4YZeyvYz2OoegIBsw6ydLr2HqyEO2Qf5zobSjG1sMDI
         yLlv5xvIRx1RCma/5R4cJeOwzMVtVblMOHS2q7wLMZ0+l7+twun7HsNWbSGW74wX
         WrOpZCrFg6n/sZEwRVo2m8RRjnhGRR7pQoJrG+yMB6HKsLFHYp0M5HBR+xiBy6mH
         6naisMeEpbl18dWyZhMrtKejaMgOb8SCskJKW9dnb0m+1MPZVZUsosSw/QTA+NeZ
         S/CcJFwmwEp5vRsPdlXlFWX6ZEXxxPo9L4HESlAyTLOWKk0n3LemV8vaUgS2GA6n
         EBAuRjo70hqHKWI9URo/LyvMAmde9d4Aq8oKtfKN9wyt1f4+T9H84fyRNd6LLd8x
         5ohtTpWiusvtvx4zCiizMPaJuQG63R4eANVcEAExloWeXtea3AJpK/yuRIolZRPJ
         bpFIAtXQEpTe/xo1QzNSOL7sSn/iZpSFpKgma1skn3yrRczEO608NasWFUUdBEeQ
         iw/GMKT0owqw9Xfar/YL1FgB7a85U7ESHlyZKukQ7VdiBuVLLkt3k8mKT4cB+bXV
         doY/8ImgRud+X06gxLjJ
         =sQDQ
         -----END PGP SIGNATURE-----
         
         
         
         -----BEGIN PGP SIGNED MESSAGE-----
         Hash: SHA1
         
         26.41968, 127.73254
         -----BEGIN PGP SIGNATURE-----
         Version: GnuPG v1.4.11 (GNU/Linux)
         
         iQIcBAEBAgAGBQJQ8coXAAoJEBgfAeV6NQkPx5EQAI2OmC0nikY26ZQu2/Y0czUa
         Se3VxcE2YnsfLAQajsw3fRmv3BcCSL8u41IvQidAY12OKr8QSMDoR8C5fVSC+4ms
         rcp6dQHkLgE03TPvFxaquhiI1j+HXcult+7IM44WttuMQAuQf8cwIMUehWKnn/eu
         g9j4nfL5kWM2uaFvQitwm3e+dbA7OJWGIqm1jgGsM9w7SORQiRT7tNy1bi7dw0u6
         wEthNkA9VJCY3u7qFrQGE2UWCknFGvkAe5QzSTMrSuPUykbQQWwlou8oN7SrLbMo
         Sl6EUnytmmRT6mlg481J6InyNb4EP2SFcJ06L2Dm1rwDEBpPv6BIBhSdqjiMBbA7
         /zyXw7jjV8DqQPsMqNjzVgoVfoywQ+EUyFPbKxQDWZ9hyeOxJKrm5+47NDIGN3eP
         Hrl2GqbOxfoQ31Avzgik4UDCqPazk9RgRfed7xki1LAK5a8EJ9PrNU5vqGhNUx7g
         hwOBdYpYTKbMbEr86N4ySw5oObo/YM+/3h5U8kXyDEt3YW1zp5YQYP0M8f80/3QT
         ZuMm6Jwtqhr91eBq8Jq1CunkUGqMezT+etaaD3lXhbXeBP4nyrZYNYN6qvSOFRa3
         kxzUK5eUm9sepaW1x/xHEvDLq1nzx4EJguZvy1ypDxDzI7BlHsDtc7U7lfce1yhE
         hn2rK0XiDXd0A6sK2tgu
         =U6r6
         -----END PGP SIGNATURE-----
         
         
         
* Connection #0 to host pklmx2eeh6fjt7zf.onion left intact


Coordinates are in Okinawa, Japan. So WE NEED SOMEONE IN OKINAWA http://goo.gl/maps/KRmyR

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

38.977845, -76.486451
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
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=7qF2
-----END PGP SIGNATURE-----

Another set of coordinates was received 16:50 CET Jan 15: https://maps.google.com/maps?q=38.977845,+-76.486451&hl=en&sll=37.0625,-95.677068&sspn=57.902911,135.263672&t=h&z=17


130 Dock St Annapolis, MD 21401 22 ft N

Ad blocker interference detected!


Wikia is a free-to-use site that makes money from advertising. We have a modified experience for viewers using ad blockers

Wikia is not accessible if you’ve made further modifications. Remove the custom ad blocker rule(s) and the page will load as expected.