CIA 2010 covert communication websites Are there .org hits? Updated 2025-07-16
Previously it was unclear if there were any .org hits, until we found the first one with clear comms: web.archive.org/web/20110624203548/http://awfaoi.org/hand.jar
Later on, two more clear ones were found with expired domain trackers:further settling their existence. Later on newimages.org also came to light.
Others that had been previously found in IP ranges but without clear comms:
.org is very rare, and has been excluded from some of our search heuristics. That was a shame, but likely not much was missed.
Entrepreneurship at the University of Cambridge Updated 2025-07-16
The best modern instrumental Western music Updated 2025-07-16
Not in other sections:
- Grant Green: Idle Moments (1963)
- John Abercrombie: Timeless (1975). Just close your eyes, and imagine.
- Paco de Lucía: Almoraima (1976)
- Modern Jazz Quartet: Django (1956)
- Bill Bruford Feels Good to Me (1978). Well, with Allan Holdsworth on the g
- Jean-Luc Ponty
Cell biology (field) Updated 2025-07-16
Cell culture Updated 2025-07-16
Cell-free protein synthesis Updated 2025-07-16
Cell projection Updated 2025-07-16
Central Intelligence Agency Updated 2025-07-16
Euro Updated 2025-07-16
The Euro Has Never Been More Problematic by Yanis Varoufakis (2018)
Source. Talk given at the Oxford Union. youtu.be/cCA68U3P_Z8?t=1288 describes the problem with the Uero a bit better. Evil demon Updated 2025-07-16
Fluorescent lamp Updated 2025-07-16
Genesis block message Updated 2025-07-16
Inscription added by Satoshi Nakamoto on the Genesis block containing:which is a reference to: www.thetimes.co.uk/article/chancellor-alistair-darling-on-brink-of-second-bailout-for-banks-n9l382mn62h wihch is fully titled:The "Alistair" was slikely removed due to limited payload concerns.
And it hints that one of Bitcoin's motivation was the financial crisis of 2007-2008, where banks were given bailouts by the government to not go under, which many people opposed as the crisis was their own fault in the first place. A notable related stab is taken at Len Sassaman tribute.
We can extract the image from the blockchain ourselves by starting from: blockchain.info/block-height/0?format=json.
From that page we manually extract the hash and that does contain the famous genesis block string:The JSON clarifies that the data is encoded in the
000000000019d6689c085ae165831e934ff763ae46a2a6c172b3f1b60a8ce26f and then:wget -O 0.hex https://blockchain.info/block/000000000019d6689c085ae165831e934ff763ae46a2a6c172b3f1b60a8ce26f?format=hex
xxd -p -r 0.hexEThe Times 03/Jan/2009 Chancellor on brink of second bailout for banksscript field of the transaction input:{
{
"script":"04ffff001d0104455468652054696d65732030332f4a616e2f32303039204368616e63656c6c6f72206f6e206272696e6b206f66207365636f6e64206261696c6f757420666f722062616e6b73"The extra where:
E (0x45 in ASCII) in EThe Times is just extra noise required by the script, we can break things up as:04ffff001d0104 45 5468652054696d65732030332f4a616e2f32303039204368616e63656c6c6f72206f6e206272696e6b206f66207365636f6e64206261696c6f757420666f722062616e6b7354isT- the
04ffff001d0104part just doesn't show up on the terminal because it is not made of any printable characters.
The initial
04 is OP_RETURN.TODO what is actual the meaning of the
ffff001d010445 part? @defango twitter.com/defango/status/1642750851134652417 comments:04ffff001d0104 is a hexadecimal string. It is commonly used in the Bitcoin network as a part of the mining process. Specifically, it is used as the target value for a block to be considered valid by the Bitcoin network.
Linearity of quantum mechanics Updated 2025-07-16
Neon lamp Updated 2025-07-16
Satoshi tribute Updated 2025-07-16
- medium.com/@chain.info1/the-mystery-behind-satoshi-tribute-donations-cf4ce28c56a1 The Mystery Behind "Satoshi Tribute" Donations by Chain.Info (2020)
Self-driving car Updated 2025-10-14
X-ray diffraction Updated 2025-07-16
Often used as a synonym for X-ray crystallography, or to refer more specifically to the diffraction part of the experiment (exluding therefore sample preparation and data processing).
CIA 2010 covert communication websites CGI comms Updated 2025-07-16
We've come across a few shallow and stylistically similar websites on suspicious ranges with this pattern.
No JS/JAR/SWF comms, but rather a subdomain, and an HTTPS page with .cgi extension that leads to a login page. Some names seen for this subdomain:
The question is, is this part of some legitimate tooling that created such patterns? And if so which? Or are they actual hits with a new comms mechanism not previously seen?
The fact that:suggests to Ciro that they are an actual hit.
- hits of this type are so dense in the suspicious ranges
- they are so stylistically similar between on another
- citizenlabs specifically mentioned a "CGI" comms method
In particular, the
secure and ssl ones are overused, and together with some heuristics allowed us to find our first two non Reuters ranges! Section "secure subdomain search on 2013 DNS Census"Some currently known URLsIf we could do a crawl search for
- backstage.musical-fortune.net/cgi-bin/backstage.cgi
- clients.smart-travel-consultant.com/cgi-bin/clients.cgi
- members.it-proonline.com/cgi-bin/members.cgi
- members.metanewsdaily.com/cgi-bin/ABC.cgi
- miembros.todosperuahora.com/cgi-bin/business.cgi
- secure.altworldnews.com/cgi-bin/desk.cgi
- secure.driversinternationalgolf.com/cgi-bin/drivers.cgi
- secure.freshtechonline.com/cgi-bin/tech.cgi
- secure.globalnewsbulletin.com/cgi-bin/index.cgi
- secure.negativeaperture.com/cgi-bin/canon.cgi
- secure.riskandrewardnews.com/cgi-bin/worldwide.cgi
- secure.theworld-news.net/cgi-bin/news.cgi
- secure.topbillingsite.com/cgi-bin/main.cgi
- secure.worldnewsandent.com/cgi-bin/news.cgi
- ssl.beyondnetworknews.com/cgi-bin/local.cgi
- ssl.newtechfrontier.com/cgi-bin/tech.cgi
- www.businessexchangetoday.com/cgi-bin/business.cgi
- heal.conquermstoday.com (path unknown)
secure.*com/cgi-bin/*.cgi that might be a good enough fingerprint, maybe even *.*com/cgi-bin/*.cgi. Edit: it is not perfect, but we kind of did it: Section "secure subdomain search on 2013 DNS Census". Helmholtz equation Updated 2025-07-16
eigenvalue problem of Laplace's equation.
The best science fiction works deeply explore the consequences of one single technology Updated 2025-07-16
The impact of the work is greater when you examine what one single new technology would do to existing society, as in Primer (2004), rather than "start on a society with severl new technologies", like in Star Wars.
Unlisted articles are being shown, click here to show only listed articles.
